The Central Bank of the UAE SME Customer Protection Regulation C 2/2026 took effect on September 13, 2026, replacing the 2021 SME Market Conduct Regulation.
UAE SME Customer Protection — C 2/2026 Regulatory State Change
SME banking conduct has moved from the C 1/2021 Market Conduct framework into the C 2/2026 Customer Protection framework, with more explicit requirements across governance, product suitability, account opening, fees, complaints, customer data and responsible financing.
What moved.
SME banking conduct has moved from the C 1/2021 Market Conduct framework into the C 2/2026 Customer Protection framework, with more explicit requirements across governance, product suitability, account opening, fees, complaints, customer data and responsible financing.
Before → now.
C 1/2021 SME Market Conduct Regulation governed the dedicated conduct framework for CBUAE-regulated financial institutions serving SME customers.
C 2/2026 SME Customer Protection Regulation is in force from September 13, 2026 and replaces the previous SME Market Conduct Regulation.
Why it matters.
The change reaches beyond disclosure into how regulated banks and finance companies design, price, sell and manage products for SME customers. It creates a durable regulatory baseline against which later changes in onboarding, fee practices, complaints, data governance and supervisory action can be tracked.
The legal state change itself is confirmed. The remaining uncertainty is implementation: how individual institutions change SME products and processes, how consistently the requirements are applied, and what supervisory or enforcement signals emerge after the effective date.
Show the evidence boundary.
5 linked sourcesSupport + limitations recorded.
Five CBUAE Rulebook records establish the new SME Customer Protection framework, responsible-conduct requirements, complaints framework, customer-data obligations and the previous C 1/2021 regime. The current C 2/2026 regulation establishes the September 13 effective state change. The legacy C 1/2021 page retains a stale in-force status label, so cancellation is established from the current C 2/2026 instrument rather than that legacy label.
01Core evidenceCBUAE Rulebook - SME Customer Protection Regulation
Central Bank of the UAE
+
CBUAE Rulebook - SME Customer Protection Regulation
Central Bank of the UAE
Establishes scope, effective date, cancellation of the 2021 regime, objectives, reporting and sanctions.
Does not show how individual banks have implemented the rules in practice.
02Core evidenceCBUAE Rulebook - Responsible Conduct
Central Bank of the UAE
+
CBUAE Rulebook - Responsible Conduct
Central Bank of the UAE
Establishes suitability, anti-abusive-sales, tied-selling, fee, switching and qualifying low-risk account-opening requirements, including the three-business-day rule.
Does not establish that any named bank previously breached these standards.
03Core evidenceCBUAE Rulebook - Complaint Management and Resolution
Central Bank of the UAE
+
CBUAE Rulebook - Complaint Management and Resolution
Central Bank of the UAE
Establishes free complaint access, an independent complaints-management function, written acknowledgment within two business days and a final written response within 30 business days.
Does not establish how quickly every complaint will be resolved.
04Core evidenceCBUAE Rulebook - Customer Data Protection
Central Bank of the UAE
+
CBUAE Rulebook - Customer Data Protection
Central Bank of the UAE
Establishes data minimization and dedicated data-management responsibilities.
Does not create a separate AI-specific regulatory regime.
05ContextCBUAE Rulebook - 2021 SME Market Conduct Regulation
Central Bank of the UAE
+
CBUAE Rulebook - 2021 SME Market Conduct Regulation
Central Bank of the UAE
Shows the previous C 1/2021 SME Market Conduct framework and its transition notice that C 2/2026 would replace it on September 13.
The legacy page still displays "Status: In-Force"; the current cancellation is established by C 2/2026 Article 10 rather than that legacy status label.
What would change this record.
Watch bank implementation notices, SME account-opening flows, fee schedules, product terms, complaint processes and customer-data controls. Track new CBUAE reporting requirements, guidance, supervisory findings or enforcement actions connected to C 2/2026.
Follow the record.
Banking & Financial Services · United Arab Emirates
Federal public institution and supervisory and regulatory authority for the UAE banking and insurance sectors.
Official website ↗